CLOUDFLARE 
AREA 1 SECURITY 


SOLUT korekt E Ree 


Enhance 
Microsoft 365 

Email Defenses with 
Cloudflare Area 1 


Extend Zero Trust to your #1 
communications tool — cloud email 


AN 


Cloudflare | Enhance Microsoft 365 Email Defenses with Cloudflare Areal 


Keep Microsoft inboxes 
threat-free with preemptive, 
cloud-native email security 


Microsoft 365 delivers excellent protection against high-volume threats, 
such as spam and viruses, and provides additional protection for Microsoft 
Advanced Threat Protection (ATP) customers. 


Yet, Gartner® notes that!, “As built-in security ... has improved, threat actors 
are also getting more sophisticated, often targeting them using fake login 
pages as a way of harvesting credentials. Sophisticated email threats include 
compromised websites and weaponized documents used to deploy malware. 
Many ransomware-as-a-service gangs use email as the initial entry point. 
Beyond malware, Business Email Compromise (BEC) and account takeover 
threats continue to rise, with significant financial losses as a result.” 


Low-volume, sophisticated threats such as those noted above are first built 
with attack infrastructure and techniques that Cloudflare Area 1 is uniquely 
capable of discovering “in the wild.” By identifying and automatically blocking 
campaigns early in the attack lifecycle (on average 24 days pre-launch), Area 
1 keeps inboxes threat-free. 


As part of the Cloudflare Zero Trust platform, the 
Area 1 email security service also: 


e Exposes malware-less financial fraud, often 
conducted over multiple email conversations with 
“trusted” vendors/suppliers 


e Blocks never-before-seen attacks in real-time, 
without your needing to “tune” a SEG or wait for 
signature/policy updates 


e Discovers compromised accounts and domains, 
as well as new, lookalike, and proximity domains 
that attackers use to bypass DMARC/SPF/DKIM 


e Isolates and blocks blended and deferred 
attacks with integration into Cloudflare Browser 
Isolation (beta) 
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How can you block more threats with Area 1’s cloud email 
o S security approach? 

Solution overview = 
Microsoft 365 delivers great security for high-volume email 
secure email gateways (SEGs) threats; however, low-volume, highly targeted phishing l 
EE EE attacks that cause upwards of 90% of cyber breaches can still 
against constantly evolving slip through. 

threats, such as Business Email 


Compromise, spoofing, and 
ransomware. 


In a cloud-first world, traditional 


How should organizations using Microsoft 365 and still dealing 
with missed phish handle modern threats? 


Enter integrated cloud email security (ICES) solutions. 
According to Gartner®, “Solutions that integrate directly into 
cloud email via an API, rather than as a gateway, ease evaluation 
and deployment and improve detection accuracy, while still 
taking advantage of the integration of the bulk of phishing 
protection with the core platform.”? 


Cloudflare Area 1 provides 
preemptive, cloud-native email 
security to comprehensively 
stop these and other targeted 
phishing attacks. 


Organizations layering 
Microsoft 365 with Cloudflare 
Area 1 receive: “By 2023, at least 40% of all organizations will use 


e Comprehensive phishing built-in protection capabilities from cloud email 


protection across internal providers rather than a secure email gateway 


and external email, web, and (SEG), up from 27% in 2020. 
network traffic 


“By 2025, 20% of anti-phishing solutions will 
phishing incident response be delivered via API integration with the email 
time platform, up from less than 5% today.” 


e Reduced IT complexity and 


e Simple deployment in e : 
PETER — 2021 Gartner® Market Guide for Email Security 


approach 
e Expedited SOC 
investigations with post- ° e 


delivery message retractions 
and SIEM/SOAR integrations 


Area 1 Horizon (now Cloudflare Area 1 email security) is a 
Representative Vendor in the Integrated Cloud Email Security 
(ICES) category in the Gartner Market Guide report. 


GARTNER is a registered trademark and service mark of Gartner, Inc. and/or its affiliates in the U.S. and internationally and is used herein with permission. All rights reserved. 
Gartner does not endorse any vendor, product or service depicted in its research publications, and does not advise technology users to select only those vendors with the 
highest ratings or other designation. Gartner research publications consist of the opinions of Gartner research organization and should not be construed as statements of 
fact. Gartner disclaims all warranties, express or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose. 


Cloudflare | Enhance Microsoft 365 Email Defenses with Cloudflare Areal 


Unlike other solutions, the Area 1 solution continuously and proactively 


crawls the web to discover new phishing campaigns and attacker 
infrastructure in the wild. On average, Area 1 preemptively detects 
malicious sites and payloads a full 24 days before attacks launch. 


Figure 1: Preemptively stop phishing attacks — before 
they reach your inbox — with Cloudflare Area 1 
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Area 1 also uses a variety of more advanced detection techniques, 
including NLU, NLP, social graph analysis (patterns of email 
communication), and image recognition, to detect and stop the most 
sophisticated attacks — including brand new, highly targeted threats 
that threaten users 1:1 vs. one to many. 


Figure 2: Analyze the content, context, and social graphs of email 
communications to stop modern threats like BEC 
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Simple deployment in minutes Area 1: 


Can be deployed in less than five minutes, with 
nothing to install and no impact to your existing 
infrastructure; 


With an API-first approach that integrates seamlessly 

into Microsoft 365, Area 1 takes just minutes to 

deploy. Detect and block phish more accurately and 

effectively — without the IT complexity needed to e Provides more flexible deployment options 

constantly “tune” an ineffective traditional SEG. (including MX/inline, connector and API) compared 
to other solutions; 


Figure 3: Example Area 1 email 
security deployment option 
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Incoming Area 1 
Email email security 
[MX] 


e Integrates seamlessly with Microsoft 365’s other 
email security features like anti-spam, DLP, 
encryption, and archiving; 


e Can effortlessly remove all malicious messages 


0365 


directly from Microsoft 365 mailboxes with built-in 
remediation and message retraction; and 


e Is completely transparent to your end users, while 
providing comprehensive, end-to-end phishing 


detection and remediation. 


Benefits of protecting your Microsoft 365 email environments with Cloudflare Area 1 include: 


Best-in-Class Cloud 
Email Security 


Seamless Workflows 


Increased Operational 
Efficiency 


Augments native Microsoft 
defenses for comprehensive 
protection against modern 
threats including BEC, 

email supply chain attacks, 
compromised vendor 
accounts, insider threats, and 
more. 


Broader threat visibility 

and forensics improve 
investigations and response 
times. 


Deep integration with Microsoft 
environments, APIs, and 
workflows. 


Integrate with ADFS, send 
alerts to Teams, and forward 
logs to Azure Sentinel. 


End users stay in native 
Microsoft dashboards for 
continued productivity and no 
distractions. 


Built on cloud-native, 
dynamically scalable 
infrastructure to handle cloud 
traffic spikes. 


Replaces traditional SEGs 
for better security and 
operational efficiency. 


Advanced detection, triage, 
and response in a single 
platform for defense-in- 
depth. 
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Keep your inboxes free of threats with 


comprehensive, integrated cloud email security: 


Anti-Phishing / Advanced Threats Defense ( URLs, Payloads, BECs, Spoofs ) 


7 


Cloud Email 
Security 


Anti-Spam / Anti-Virus 


Sender Authentication & Hygiene 


API, Integrations, Orchestrations 


M-SOAR / Phishing Incident Response 
( Email Security, Orchestration & Response ) 


Multi-Mode Protection ( SMTP Gateway, Mx, Inline, API, Connector, Journaling, Web ) 


Cloud Native, On-Demand Scale & Resilience 


Email Hygiene (AS/ AV) 


EE Microsoft 365 


Data Protection & Encryption 


Microsoft + Cloudflare: enabling a more secure and 
private cloud 


Cloudflare has built deep integrations with Microsoft 
to help organizations take the next step in their 

Zero Trust journey. These integrations empower 
organizations to make customer implementations 
operationally efficient while delivering a seamless 
user experience and scaling operations. 


In addition to Area 1, Cloudflare’s Zero Trust services 
integrations include: 


e Azure Active Directory (AD) — Leverage powerful 
authentication tools, including multi-factor 
authentication (MFA), conditional access policies, 
and risk-based controls. 


e Microsoft Cloud App Security (MCAS) — Launch 
the M365 integration to scan for and present new 
security issues to customers related to M365 
users, data, and in-app services. 


Groupware & Collaboration 


Archiving & Compliance 


e Zero Trust for Azure Apps — Enable secure 
access to on-premise applications or Azure-hosted 
applications — no VPN required. 


e Microsoft Endpoint Manager — Evaluate client 
posture at the time of sign-in via Microsoft Intune, 
allowing Cloudflare to allow or deny access based 
on security or device posture signals. 


e Microsoft 365 — Deliver a faster and more secure 
user experience by optimizing user connectivity 
to Microsoft 365 via Cloudflare and Microsoft’s 
Networking Partner Program. 


To learn more about Cloudflare’s partner integrations 
with Microsoft, contact us. 


To see how Cloudflare Area 1 can enhance 
your Microsoft 365 phishing defenses, 
request a custom risk assessment here. 
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